Namecheap has its mail system hacked. Some users found that they received a phishing email from hello@namecheap.com.
Do Son
CVE-2023-20076 (CVSS score of 7.2) exists because of incomplete sanitization of parameters passed in for activation of an application
Tracked as CVE-2023-25194, Apache Kafka could allow a remote authenticated attacker to execute arbitrary code on the system
Discovered by the security researcher, Erol Guven, CVE-2023-25727 is an XSS attack and affects phpMyAdmin versions prior to 4.9.11 and 5.2.1
CVE-2023-24813 could allow a remote attacker to execute arbitrary code on the system, caused by the unsafe deserialization of data.
The flaw, tracked as CVE-2023-0286, has been described as a type confusion in X.509 GeneralName that allow an attacker to read memory contents
CVE-2023-0669 is described as a remote code injection that requires access to the administrative console of the application.
CVE-2023-0045 impacts all Linux kernels without the installed patch. Patches for the security issues were released on January 12.
CVE-2023-25135 has been described as a deserialisation issue that can be exploited by an unauthenticated attacker to execute arbitrary code
A PoC local privilege escalation exploit for the vulnerability tracked as CVE-2023-0179 (CVSS score: 7.8) has been detailed by TurtleARM.
The security researcher from Hacksysteam announced the release of PoC exploits code targeting the CVE-2023-21608 vulnerability.
An attacker could exploit the CVE-2023-22501 vulnerability to impersonate another user and gain access to a Jira Service Management instance.
CVE-2023-22952 (CVSS score of 8.8) affects SugarCRM which could allow a remote authenticated attacker to execute arbitrary code on the system